Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a383130303a3a2f34302d3430203d3e20323637353836.roa
File:                     323830343a343362383a383130303a3a2f34302d3430203d3e20323637353836.roa (raw, json)
Hash identifier:          9zhzLpyF0E+xZey6m5CD8u8ck7fdWwK3miVjjkshTzA=
Subject key identifier:   8A:71:D6:CF:46:26:62:FB:C8:06:81:82:BE:C6:F9:EA:C3:D6:53:F3
Certificate issuer:       /CN=E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F
Certificate serial:       2A6523B3214344F4D5287CD32FC0CE1D2353352C
Authority key identifier: E6:C7:92:C3:CC:AE:28:2D:68:69:D1:7A:BE:F6:AC:7C:84:D7:22:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a383130303a3a2f34302d3430203d3e20323637353836.roa
Signing time:             Mon 20 Oct 2025 17:22:36 +0000
ROA not before:           Mon 20 Oct 2025 17:17:36 +0000
ROA not after:            Mon 19 Oct 2026 17:22:36 +0000
asID:                     267586
IP address blocks:        2804:43b8:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.crl
                          rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:65:23:b3:21:43:44:f4:d5:28:7c:d3:2f:c0:ce:1d:23:53:35:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F
        Validity
            Not Before: Oct 20 17:17:36 2025 GMT
            Not After : Oct 19 17:22:36 2026 GMT
        Subject: CN=8A71D6CF462662FBC8068182BEC6F9EAC3D653F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:9e:a9:5e:2c:cf:99:30:99:9b:dd:9f:46:
                    4b:38:6d:8a:15:d0:83:b6:88:a7:eb:f6:38:d3:7a:
                    99:5c:c7:4f:83:64:c1:41:9b:9b:b3:b9:38:c9:17:
                    b4:4d:e5:4a:ab:74:b1:95:02:35:98:d9:25:9f:65:
                    33:0a:14:8a:ed:3b:f6:25:53:c6:d3:c3:1c:13:b7:
                    b6:c0:8d:2b:54:9a:35:7d:32:09:30:1b:f3:69:17:
                    26:4c:d5:93:95:c9:0f:4a:63:c9:1e:7a:6a:54:6c:
                    85:74:62:d1:bd:ac:3f:b4:cb:46:10:2c:3d:b3:08:
                    84:c3:3b:50:c1:87:94:bc:da:75:33:2a:f4:d6:5e:
                    23:33:0d:e3:45:7a:7f:26:5d:fb:99:c3:71:17:92:
                    8d:23:b3:1a:fe:f9:a8:ce:cb:bf:be:6b:12:57:55:
                    3d:96:96:6b:44:4e:ce:e9:5e:be:a9:0a:78:bf:ec:
                    ba:d4:22:18:cc:06:26:13:a8:28:3b:7d:40:00:11:
                    61:d8:3e:e7:c3:79:13:c2:be:7f:2a:7f:74:a1:8b:
                    fd:25:70:22:b0:26:9f:26:29:57:71:7b:e4:ac:17:
                    9c:86:68:ba:f5:b0:af:4a:4d:ce:8b:4c:ad:63:e8:
                    fa:c3:5b:8e:5b:ac:82:80:1e:c8:23:76:47:c8:04:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:D6:CF:46:26:62:FB:C8:06:81:82:BE:C6:F9:EA:C3:D6:53:F3
            X509v3 Authority Key Identifier:
                keyid:E6:C7:92:C3:CC:AE:28:2D:68:69:D1:7A:BE:F6:AC:7C:84:D7:22:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a383130303a3a2f34302d3430203d3e20323637353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b8:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:57:1a:03:70:e8:a1:e0:77:9c:fa:d8:04:69:dc:af:b2:84:
         c0:23:fc:4e:89:0b:40:b1:22:e3:db:eb:ad:7b:6e:cc:28:15:
         f9:2b:a3:d8:33:7a:9c:50:bb:bc:6c:9d:f0:59:2d:cd:7b:af:
         0c:f1:ee:e3:4c:70:38:46:cd:50:aa:6d:49:69:e6:a9:b4:c5:
         a9:57:07:c0:2f:e7:d4:3d:53:25:a0:12:6a:42:51:b1:e9:05:
         77:5c:73:1a:6f:cd:84:d1:7e:6b:f1:a0:04:22:ae:de:1e:f1:
         64:68:20:3a:44:e0:19:c3:d8:39:c6:35:36:87:9d:96:2d:ce:
         46:a5:80:bf:ba:91:92:11:93:d6:61:c6:ee:e1:8c:9c:31:9f:
         f4:0c:bc:05:07:58:70:6a:ea:06:22:f7:e0:ad:2d:98:23:e4:
         06:04:ed:48:4b:3f:75:75:2d:96:d3:13:df:4e:15:62:a5:7c:
         8d:4a:56:4f:46:e0:65:db:70:26:28:de:44:dc:e2:b4:a5:f7:
         04:0d:de:80:47:f1:ac:f8:b4:b3:ce:da:21:bb:49:24:c2:d1:
         df:13:ec:cf:4f:ac:62:c9:e2:0a:88:ab:69:b6:25:41:78:ac:
         d3:3b:51:35:0c:54:72:ef:1b:a8:1c:44:50:8a:53:7b:41:1c:
         51:fd:01:51
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKmUjsyFDRPTVKHzTL8DOHSNTNSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZDNzkyQzNDQ0FFMjgyRDY4NjlEMTdBQkVGNkFDN0M4
NEQ3MjI2RjAeFw0yNTEwMjAxNzE3MzZaFw0yNjEwMTkxNzIyMzZaMDMxMTAvBgNV
BAMTKDhBNzFENkNGNDYyNjYyRkJDODA2ODE4MkJFQzZGOUVBQzNENjUzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLJ6pXizPmTCZm92fRks4bYoV
0IO2iKfr9jjTeplcx0+DZMFBm5uzuTjJF7RN5UqrdLGVAjWY2SWfZTMKFIrtO/Yl
U8bTwxwTt7bAjStUmjV9MgkwG/NpFyZM1ZOVyQ9KY8keempUbIV0YtG9rD+0y0YQ
LD2zCITDO1DBh5S82nUzKvTWXiMzDeNFen8mXfuZw3EXko0jsxr++ajOy7++axJX
VT2WlmtETs7pXr6pCni/7LrUIhjMBiYTqCg7fUAAEWHYPufDeRPCvn8qf3Shi/0l
cCKwJp8mKVdxe+SsF5yGaLr1sK9KTc6LTK1j6PrDW45brIKAHsgjdkfIBC4dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUinHWz0YmYvvIBoGCvsb56sPWU/MwHwYDVR0j
BBgwFoAU5seSw8yuKC1oadF6vvasfITXIm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVGTm9YSjdQRVJ1QUtidjl1YndyN1N3d1dDTFFtdjR4ZllYSEVRTW4z
RnIvMC9FNkM3OTJDM0NDQUUyODJENjg2OUQxN0FCRUY2QUM3Qzg0RDcyMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2Qzc5MkMzQ0NBRTI4MkQ2
ODY5RDE3QUJFRjZBQzdDODRENzIyNkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVRk5vWEo3UEVSdUFLYnY5dWJ3cjdTd3dXQ0xRbXY0eGZZWEhFUU1uM0ZyLzAv
MzIzODMwMzQzYTM0MzM2MjM4M2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM1MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQ7iBMA0GCSqGSIb3DQEBCwUA
A4IBAQADVxoDcOih4Hec+tgEadyvsoTAI/xOiQtAsSLj2+ute27MKBX5K6PYM3qc
ULu8bJ3wWS3Ne68M8e7jTHA4Rs1Qqm1JaeaptMWpVwfAL+fUPVMloBJqQlGx6QV3
XHMab82E0X5r8aAEIq7eHvFkaCA6ROAZw9g5xjU2h52WLc5GpYC/upGSEZPWYcbu
4YycMZ/0DLwFB1hwauoGIvfgrS2YI+QGBO1ISz91dS2W0xPfThVipXyNSlZPRuBl
23AmKN5E3OK0pfcEDd6AR/Gs+LSzztohu0kkwtHfE+zPT6xiyeIKiKtptiVBeKzT
O1E1DFRy7xuoHERQilN7QRxR/QFR
-----END CERTIFICATE-----
Generated at Tue Nov 4 02:00:59 2025 by rpki-client